XML external entity (XXE) vulnerability in Jenkins

GHSA-qg7x-4h4q-3m49 · CVE-2015-1811

Published May 24, 2022 · Modified Dec 5, 2024

Description

XML external entity (XXE) vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2015-1811
WEB https://bugzilla.redhat.com/show_bug.cgi?id=1205632
WEB https://jenkins.io/security/advisory/2015-02-27

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes